Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/34352e3232372e3232382e302f32322d3332203d3e20323731373034.roa
File:                     34352e3232372e3232382e302f32322d3332203d3e20323731373034.roa (raw, json)
Hash identifier:          AZ5AjuyiDKslF01Xnp1gauO5MbRhrv2gE7K3QMFSfLc=
Subject key identifier:   3E:14:5A:59:7C:8B:3F:66:5C:B9:98:05:A9:06:5F:66:7E:59:0C:84
Certificate issuer:       /CN=3924B516E35165FE5C42CA81DECF7024E08B60F5
Certificate serial:       49FA06FC2DD71735D9CA966756A2515D6CB8BBCB
Authority key identifier: 39:24:B5:16:E3:51:65:FE:5C:42:CA:81:DE:CF:70:24:E0:8B:60:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3924B516E35165FE5C42CA81DECF7024E08B60F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/34352e3232372e3232382e302f32322d3332203d3e20323731373034.roa
Signing time:             Mon 16 Feb 2026 20:09:44 +0000
ROA not before:           Mon 16 Feb 2026 20:04:44 +0000
ROA not after:            Mon 15 Feb 2027 20:09:44 +0000
asID:                     271704
IP address blocks:        45.227.228.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.crl
                          rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3924B516E35165FE5C42CA81DECF7024E08B60F5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Feb 2026 23:48:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:fa:06:fc:2d:d7:17:35:d9:ca:96:67:56:a2:51:5d:6c:b8:bb:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3924B516E35165FE5C42CA81DECF7024E08B60F5
        Validity
            Not Before: Feb 16 20:04:44 2026 GMT
            Not After : Feb 15 20:09:44 2027 GMT
        Subject: CN=3E145A597C8B3F665CB99805A9065F667E590C84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:80:3f:ac:68:40:be:69:16:c5:6f:91:4a:
                    64:c9:7b:b1:58:96:3f:4b:b8:2e:20:f6:b0:44:9b:
                    f8:aa:81:f9:60:22:54:b0:96:e2:2a:1d:73:ec:c5:
                    16:6c:3e:e6:fd:70:c8:fc:cd:42:e9:e2:be:19:6d:
                    55:4d:12:ed:71:2b:fc:90:79:48:74:59:10:44:49:
                    7a:e3:4e:54:ef:ef:9a:13:3a:0b:10:b0:49:60:95:
                    2f:24:cb:9d:29:81:53:78:5a:f6:96:1c:31:dd:b5:
                    cb:77:28:20:b5:e7:e5:d9:85:37:bd:0c:2a:46:34:
                    04:b4:49:0b:42:1f:69:21:a3:5e:d2:4a:d3:c2:7a:
                    6b:e0:db:89:e1:6f:90:1e:85:53:ad:c4:12:90:1b:
                    c4:91:00:dd:f0:d9:e8:d2:2d:c3:2e:d3:b7:f7:16:
                    15:dd:62:10:d8:fa:7b:7f:a5:de:75:f9:08:d9:97:
                    80:3d:89:0e:21:f1:31:87:8f:2f:57:e8:2d:1c:b8:
                    9e:dc:d1:d2:6b:7e:8f:8e:73:63:6d:68:2b:f0:ea:
                    15:5f:ff:df:74:66:bb:84:51:74:c5:a9:ba:38:a2:
                    2f:78:ed:57:a8:ee:21:2c:5a:80:e0:90:33:5a:7d:
                    f1:42:bf:90:ea:b6:b2:65:f9:72:9a:e6:62:52:1b:
                    33:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:14:5A:59:7C:8B:3F:66:5C:B9:98:05:A9:06:5F:66:7E:59:0C:84
            X509v3 Authority Key Identifier:
                keyid:39:24:B5:16:E3:51:65:FE:5C:42:CA:81:DE:CF:70:24:E0:8B:60:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/3924B516E35165FE5C42CA81DECF7024E08B60F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3924B516E35165FE5C42CA81DECF7024E08B60F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DEuGHPKjiFwVxKgcg8h6j1uX8NkMUzHqovZe2amM3NaU/0/34352e3232372e3232382e302f32322d3332203d3e20323731373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:df:0c:b3:26:13:9d:08:13:55:d5:ff:14:a1:ad:e8:43:b0:
         68:01:44:93:11:15:ae:5a:c5:bd:b7:c9:ee:9a:05:6c:b0:7d:
         ad:5d:35:b1:01:a1:47:92:9c:15:61:2c:60:40:d8:7d:81:c9:
         8d:a1:26:b6:21:7f:70:ca:28:b1:28:a1:a7:e7:2d:7e:26:36:
         78:f1:ec:62:84:f4:df:4e:79:2a:51:5b:76:ab:3f:b1:27:5c:
         e2:ab:d1:d9:43:b1:5a:8c:5c:9c:59:ac:12:47:d1:61:ea:35:
         42:16:29:31:7b:40:08:d9:67:d1:bc:22:71:81:5a:22:72:72:
         be:9b:05:e6:b2:0d:9e:f4:ff:08:82:53:4c:35:76:e6:50:9f:
         70:71:9d:98:90:77:6d:b0:74:37:97:2a:e0:20:6b:67:2d:0b:
         6a:57:e8:d3:a0:9b:55:9d:0c:9f:59:48:23:6b:07:e2:7d:64:
         42:7f:56:9d:30:c7:f2:cf:df:42:3d:f8:6c:60:da:d1:12:87:
         a5:60:7d:ec:40:98:77:86:dd:cf:3c:7a:12:2c:76:41:29:65:
         da:e3:0c:e8:8f:11:6e:74:25:6e:13:c8:9a:76:31:5d:c3:de:
         45:83:b6:80:b1:9f:6e:18:5c:70:35:5f:b9:f5:81:29:30:1e:
         d3:74:4d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 07:22:21 2026 by rpki-client